This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa File: leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa (raw, json) Hash identifier: GdIMZybNZl5df9XYMstFVlZBXNPkG5yeseOXJcm5jII= Subject key identifier: 95:E3:F6:98:D3:D5:26:D3:F6:1A:3F:27:51:5F:1F:A7:9F:D3:D4:19 Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49 Certificate serial: 019B7C7FA0C58F7AA0B798740FB957E957EA Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa Signing time: Fri 02 Jan 2026 02:18:17 +0000 ROA not before: Fri 02 Jan 2026 02:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59586 IP address blocks: 91.240.252.0/23 maxlen: 23 185.148.140.0/22 maxlen: 22 2001:67c:1ba4::/48 maxlen: 48 2a07:6000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:a0:c5:8f:7a:a0:b7:98:74:0f:b9:57:e9:57:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49 Validity Not Before: Jan 2 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95e3f698d3d526d3f61a3f27515f1fa79fd3d419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:f4:f8:05:b0:d8:10:a6:e6:21:99:90:e3: 5e:f1:52:f6:71:50:03:48:da:c2:18:45:a3:cb:40: 7d:eb:f0:05:98:64:4d:e4:ed:85:51:ae:93:12:ac: 42:7a:59:98:da:9b:60:6e:ee:27:a7:a3:10:48:e1: 96:f3:11:a5:2f:b8:cc:54:36:e7:24:69:aa:5a:fd: dc:f8:58:a6:54:3a:b1:83:7c:af:d1:f1:33:7e:80: 43:35:10:5c:e3:68:61:b6:82:7e:c1:3e:a5:64:63: 9e:d1:ad:36:e8:38:d1:96:02:fb:d3:67:04:ef:ef: 40:80:69:b3:38:63:61:48:0f:92:68:51:15:21:d8: c7:3a:97:32:18:10:86:13:0e:29:72:dd:6e:45:33: f0:90:8b:82:25:fa:fe:64:42:fb:de:49:92:b8:aa: c6:89:3a:98:6a:4f:68:b5:c4:19:34:d5:8a:6a:fd: 57:db:c5:37:4d:83:00:b8:f1:2e:51:87:64:9d:1f: be:04:dd:d8:bd:65:8d:1e:cb:91:62:c6:3b:e7:2c: eb:b1:2f:6d:c7:26:1d:5e:ca:15:59:ee:c2:d8:95: 0e:e0:08:fb:df:e9:22:76:83:14:cc:b7:0c:f8:e9: 7b:28:3c:6d:e4:d1:f3:c0:70:c5:91:03:db:33:26: 3a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E3:F6:98:D3:D5:26:D3:F6:1A:3F:27:51:5F:1F:A7:9F:D3:D4:19 X509v3 Authority Key Identifier: keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/leP2mNPVJtP2Gj8nUV8fp5_T1Bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.252.0/23 185.148.140.0/22 IPv6: 2001:67c:1ba4::/48 2a07:6000::/29 Signature Algorithm: sha256WithRSAEncryption 95:e8:a4:1e:f2:3f:36:78:ef:78:c9:39:da:21:57:9f:29:09: b3:bb:07:2c:ba:e4:a1:bd:6f:05:19:5a:a2:b5:84:f8:f9:dd: f5:71:8a:15:ce:50:ad:6d:29:37:58:3a:10:ea:1a:49:5e:73: 4b:19:29:7f:d7:c9:eb:b4:13:74:0a:3e:da:a3:d2:6f:ea:64: 8a:8e:e8:1f:4f:12:8e:6f:02:57:c7:2f:a0:e1:b6:47:4c:b1: 8a:fa:91:d3:c6:18:75:2e:01:f8:ab:b1:22:cd:be:05:59:5e: a5:d4:31:9f:45:05:3b:3b:89:aa:ff:5e:0a:59:91:02:f6:59: 3f:8f:00:de:f8:78:7f:49:4f:78:5e:50:eb:9b:44:86:05:22: 2c:df:c8:f9:de:5b:d5:ad:0f:cb:7d:99:7a:bc:03:04:30:dd: 2f:af:c2:90:e7:20:2a:81:c2:e9:94:a1:1d:cd:18:35:4a:41: b8:e8:09:f5:d7:f2:0f:31:7c:8a:d7:6a:c3:9b:28:41:50:0d: 5f:cc:d0:e4:4a:00:41:ed:52:c3:9e:0e:ed:78:bb:86:d5:7c: 45:0e:60:14:ee:88:4c:e7:24:3c:dd:61:e2:ca:5d:94:0a:ca: 17:b9:8a:f4:bf:e9:3a:af:7b:1a:db:d0:bc:4d:33:c7:80:19: ff:f3:c5:4f -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8f6DFj3qgt5h0D7lX6VfqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMDRjYTRhOTY2MTYzMWM0ZWM2MTVhM2E2ZDE1ZDIyMDMw ZGNmNDkwHhcNMjYwMTAyMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWUzZjY5OGQzZDUyNmQzZjYxYTNmMjc1MTVmMWZhNzlmZDNkNDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcX0+AWw2BCm5iGZkONe8VL2cVAD SNrCGEWjy0B96/AFmGRN5O2FUa6TEqxCelmY2ptgbu4np6MQSOGW8xGlL7jMVDbn JGmqWv3c+FimVDqxg3yv0fEzfoBDNRBc42hhtoJ+wT6lZGOe0a026DjRlgL702cE 7+9AgGmzOGNhSA+SaFEVIdjHOpcyGBCGEw4pct1uRTPwkIuCJfr+ZEL73kmSuKrG iTqYak9otcQZNNWKav1X28U3TYMAuPEuUYdknR++BN3YvWWNHsuRYsY75yzrsS9t xyYdXsoVWe7C2JUO4Aj73+kidoMUzLcM+Ol7KDxt5NHzwHDFkQPbMyY6/wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJXj9pjT1SbT9ho/J1FfH6ef09QZMB8GA1UdIwQY MBaAFGoEykqWYWMcTsYVo6bRXSIDDc9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMt ODExM2RhNjdlZjc1LzEvbGVQMm1OUFZKdFAyR2o4blVWOGZwNV9UMUJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMtODExM2RhNjdlZjc1 LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQBW/D8AwQC uZSMMBYEAgACMBADBwAgAQZ8G6QDBQMqB2AAMA0GCSqGSIb3DQEBCwUAA4IBAQCV 6KQe8j82eO94yTnaIVefKQmzuwcsuuShvW8FGVqitYT4+d31cYoVzlCtbSk3WDoQ 6hpJXnNLGSl/18nrtBN0Cj7ao9Jv6mSKjugfTxKObwJXxy+g4bZHTLGK+pHTxhh1 LgH4q7Eizb4FWV6l1DGfRQU7O4mq/14KWZEC9lk/jwDe+Hh/SU94XlDrm0SGBSIs 38j53lvVrQ/LfZl6vAMEMN0vr8KQ5yAqgcLplKEdzRg1SkG46An11/IPMXyK12rD myhBUA1fzNDkSgBB7VLDng7teLuG1XxFDmAU7ohM5yQ83WHiyl2UCsoXuYr0v+k6 r3sa29C8TTPHgBn/88VP -----END CERTIFICATE-----Generated at Mon Jan 26 19:53:27 2026 by rpki-client